NVD

Id
50874  
Name
CVE-2009-3676  
Description
The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka "SMB Client Incomplete Response Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-11-13  
Modified Date
2010-08-21  
Seq
2009-3676  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257526 50874 CVE-2009-3676 http://blogs.technet.com/msrc/archive/2009/11/13/microsoft-security-advisory-977544-released.aspx  View
257527 50874 CVE-2009-3676 http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html  View
257528 50874 CVE-2009-3676 http://news.cnet.com/8301-27080_3-10395891-245.html  View
257529 50874 CVE-2009-3676 oval:org.mitre.oval:def:7186  View
257530 50874 CVE-2009-3676 http://praetorianprefect.com/archives/2009/11/how-to-crash-windows-7-and-server-2008/  View
257531 50874 CVE-2009-3676 20091111 Windows 7 , Server 2008R2 Remote Kernel Crash  View
257532 50874 CVE-2009-3676 http://www.microsoft.com/technet/security/advisory/977544.mspx  View
257533 50874 CVE-2009-3676 MS10-020  View
257534 50874 CVE-2009-3676 1023179  View
257535 50874 CVE-2009-3676 TA10-103A  View
257536 50874 CVE-2009-3676 ADV-2009-3216  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41390 JVNDB-2009-002397 Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 Microsoft Windows の kernel には、SMBv1 または SMBｖ2 応答パケットの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-3676 41107 CVE-2009-3676 50874 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002397.html 2009-11-13 2010-05-12 View